How to create and manage user accounts

Add an account, give it roles, and find anybody in the institution.

Last updated 12 October 2026

What you will learn

  • How to create an account
  • How to find somebody
  • What the statuses mean

Before you begin

  • Know the person's email address and which roles they need.
  • Decide how you will give them their password — this system sends no email.

Users lists every account in the institution. A person's roles decide what they can do; the system checks that on every request, so what you set here is what is enforced.

The account list. Names and email addresses are blurred in this guide for privacy.

Create an account

  1. Step 1. Click Users in the left-hand menu.

  2. Step 2. Click New account.

  3. Step 3. Type the Email and Username. Both are required.

    Each role is described next to its name, so you can see what you are granting.
  4. Step 4. Fill in First name and Last name so colleagues can recognise them.

  5. Step 5. Tick the Roles this person needs.

    Tick only what they need. You can add a role later; it is harder to undo damage done by one granted too early.

  6. Step 6. Set an Initial password, or click Generate to have one made for you.

  7. Step 7. Click Create account.

  8. Step 8. Give the person their password yourself, in person or by a channel you trust.

There is no invitation email

This system does not send email. Creating the account is you vouching for the person, and passing on the password is your job. Never send a password by ordinary email or a public chat.

Find somebody

  • Type a name or email into Search users.
  • Use Any status to show only active or only suspended accounts.
  • Use Any role to list every tutor, for example.

Open an account

Click a person's name to open their account. From there you can edit their details, change their roles, and suspend or restore the account.

What you should see

The new account appears in the list and the person can sign in.

Helpful tips

  • Use the Generate button for passwords. A generated password is far stronger than one you invent.
  • Suspending an account is usually better than deleting it — the person's history stays intact.

If something goes wrong

The email address is refused.
Another account already uses it. Every email must be unique.
The new person cannot sign in.
Check the username you gave them matches exactly, and that the account is active.

Related articles